AZ-500 · Question #579
Hotspot Question You have an Azure key vault named sk2311 configured as shown in the following exhibit. Sk2311 contains the items shown in the following table. In sk2311, the following events occur…
The correct answer is You can recover Policy1. = No; You can add a new key named Item1. = No; You can recover Item2. = Yes. Azure Key Vault with soft-delete enabled retains deleted secrets, keys, and certificates for a retention period (default 90 days), allowing recovery. However, access policies are NOT versioned or soft-deleted - once Policy1 is deleted, it cannot be recovered through Key Vault…
Question
Exhibits
Answer Area
- You can recover Policy1.No
- You can add a new key named Item1.No
- You can recover Item2.Yes
Explanation
Azure Key Vault with soft-delete enabled retains deleted secrets, keys, and certificates for a retention period (default 90 days), allowing recovery. However, access policies are NOT versioned or soft-deleted - once Policy1 is deleted, it cannot be recovered through Key Vault mechanisms. Item2 (a secret/key/certificate) CAN be recovered because soft-delete protects it. Item1 CANNOT be added as a new key while it exists in a soft-deleted state - the deleted item must first be purged or recovered before a new item with the same name can be created.
Topics
Community Discussion
No community discussion yet for this question.